Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: 7BqRSdP0kCfYcbB5Ay+XS++ntw793Q7sldwa6kJc51U=
Subject key identifier: AE:29:91:D6:AD:A2:62:2E:BF:34:B1:63:F7:37:FF:93:D2:EE:43:12
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 01967A56C905F8F509141A9367C4212AD63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 03:00:29 +0000
Manifest this update: Mon 28 Apr 2025 03:00:29 +0000
Manifest next update: Tue 29 Apr 2025 03:00:29 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: PbnPUaEhuU484jusUFcxKNsWUVtN171rJM2mbFhYgns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:c9:05:f8:f5:09:14:1a:93:67:c4:21:2a:d6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Apr 28 03:00:29 2025 GMT
Not After : Apr 29 03:00:29 2025 GMT
Subject: CN=ae2991d6ada2622ebf34b163f737ff93d2ee4312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:60:c5:a4:69:88:bf:65:60:49:95:bc:2d:
76:81:a4:b6:76:1f:08:d9:04:3b:21:1f:b1:dd:03:
e2:31:bc:7b:0d:45:c2:d8:86:63:ae:71:f4:86:8b:
5a:ff:b1:f3:64:b7:88:8c:b3:c6:c6:33:bf:3a:cf:
8c:c6:c5:11:34:f9:3f:e9:53:08:34:c9:9e:e7:f0:
bd:10:48:7a:f6:0c:65:37:16:31:f0:e0:10:ac:98:
86:2d:91:82:74:81:c5:c6:97:ac:18:c9:41:b9:47:
ad:38:3f:ee:e8:a2:39:c3:6f:ee:bd:85:57:5a:33:
66:1d:d8:bd:d9:63:29:44:88:f4:f3:99:2b:d0:b0:
58:f8:06:e0:b6:c5:0d:d6:e1:46:96:9a:a7:da:dc:
eb:e3:c3:6a:03:24:a5:b0:6c:ba:97:af:fe:e6:30:
7f:83:84:e2:dc:97:e2:04:c7:ef:33:d5:3e:d0:ae:
c9:8d:97:88:4b:f2:90:28:69:52:e3:89:97:05:39:
7e:e2:33:62:8f:6b:88:c7:b4:38:b7:69:14:75:c8:
fc:a7:66:46:e8:d5:e0:88:3e:e1:d8:9d:b8:82:62:
09:63:24:b0:2e:ab:94:5a:f0:db:a4:7e:4d:0c:6f:
2f:80:9f:40:cc:34:44:c1:2a:90:0c:7a:6e:7b:47:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:91:D6:AD:A2:62:2E:BF:34:B1:63:F7:37:FF:93:D2:EE:43:12
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fd:a0:3a:d2:4a:26:91:7a:b7:70:77:69:08:41:c5:a7:f5:
fe:75:d2:26:2a:59:be:08:02:31:44:99:0e:1a:67:16:b6:80:
47:49:a1:bd:0d:35:e6:39:a1:85:01:78:a9:31:2f:76:22:ff:
e8:7a:88:70:98:69:8e:0e:b4:b2:09:3e:2e:33:b2:1b:26:eb:
ed:64:69:a5:f7:6a:c3:a2:97:20:d5:16:5c:c4:ce:a7:a7:f6:
4d:8c:a5:9b:c5:a4:ba:c7:4c:5f:8e:08:02:b6:af:27:af:35:
2c:a6:db:ed:2a:6e:ae:3d:1d:f3:33:46:77:40:33:c2:a7:e7:
ca:8c:61:3b:7c:e3:5c:09:ac:d0:57:7a:0c:26:84:3c:a0:18:
fb:ae:6e:4a:9b:4c:30:1b:8c:c5:07:61:c6:0e:1a:c0:f1:2a:
f3:b4:b9:b9:87:37:45:fb:27:b8:16:1a:8f:3e:84:16:03:0a:
52:55:84:18:d3:f2:68:f0:76:d0:1b:26:16:bd:24:f7:ca:f0:
02:95:69:60:cd:87:10:61:17:38:38:4c:f6:72:dd:5a:2c:c8:
89:a7:f5:55:26:4b:ce:8f:d7:8d:c7:d0:e4:59:b0:df:07:4b:
49:82:34:bd:52:a9:9c:d6:52:cb:4f:9d:85:28:dd:9c:bb:0f:
e3:a2:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:33 2025 by rpki-client